fwpri

Firewall Privileges

Allow users to configure their own firewall settings. All user-configured settings cannot be overridden by settings deployed from the OfficeScan server. For example, if the user disables Intrusion Detection System (IDS) and you enable IDS on the OfficeScan server, IDS remains disabled on the client computer.

To grant firewall privileges:

Networked Computers > Client Management

In the client tree, click the root domain icon to include all clients or select specific domains or clients.
Click Settings > Privileges and Other Settings.
On the Privileges tab, go to the Firewall Privileges section.
Select the following options:

Display the Firewall Tab on the Client Console
Allow Users to Enable/Disable the OfficeScan Firewall, the Intrusion Detection System, and the Firewall Violation Notification Message
Allow Clients to Send Firewall Logs to the OfficeScan Server

If you selected domain(s) or client(s) in the client tree, click Save. If you clicked the root domain icon, choose from the following options:

Apply to All Clients: Applies settings to all existing clients and to any new client added to an existing/future domain. Future domains are domains not yet created at the time you configured the settings.
Apply to Future Domains Only: Applies settings only to clients added to future domains. This option will not apply settings to new clients added to an existing domain.

Display the Firewall Tab on the Client Console

The Firewall tab displays all firewall settings on the client and allows users with firewall privileges to configure their own settings.

Firewall tab on the client console

Allow Users to Enable/Disable the OfficeScan Firewall, the Intrusion Detection System, and the Firewall Violation Notification Message

The OfficeScan firewall protects clients and servers on the network using stateful inspection, high performance network virus scanning, and elimination. If you grant users the privilege to enable or disable the firewall and its features, warn them not to disable the firewall for an extended period of time to avoid exposing the computer to intrusions and hacker attacks.

If you do not grant users the privileges, the firewall settings you configure from the OfficeScan server web console display under Network card list on the client console.

Allow Clients to Send Firewall Logs to the OfficeScan Server

Select this option to analyze traffic the OfficeScan firewall blocks and allows. For details about firewall logs, see Firewall Logs.

If you select this option, configure the log sending schedule in Networked Computers > Global Client Settings > Firewall Settings section. The schedule only applies to clients with the firewall log sending privilege. For instructions, see Global Firewall Settings.